During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?
A.
Escalate the issue to senior management
B.
Discuss risk mitigation options with the risk owner
C.
Certify the control after documenting the concern
D.
Implement compensating controls to reduce residual risk
The BEST recommendation is option B, Discuss risk mitigation options with the risk owner. By discussing the issue with the risk owner, the control owner can work collaboratively to identify and assess the risks associated with the deteriorated control, determine the appropriate course of action to mitigate the risks, and implement a plan to address the issue. This recommendation provides the opportunity for the control owner to address the issue in a timely and efficient manner without involving senior management or implementing compensating controls unnecessarily.
B. Discuss risk mitigation options with the risk owner.
The best recommendation to the control owner when they state that an existing control has deteriorated over time is to discuss risk mitigation options with the risk owner. This course of action involves collaborating with the individual or team responsible for managing the risk associated with the deteriorated control. By discussing the issue with the risk owner, they can work together to identify potential solutions or alternative controls that can help address the situation effectively.
Option B reflects a proactive approach to addressing the control deterioration, focusing on identifying solutions to mitigate the risk. While the other options might be relevant in certain situations, discussing risk mitigation options with the risk owner is the most direct and constructive way to address the control's deterioration.
If the CO for a DOOR finds out the key has been copied, thus out of hands for too many persons. Will CO install another lock for the door OR will discuss with RO first about the options? If the control is needed, RO wouldnt care how CO takes care of it. HOWEVER, CO will not know that, THUS first CO should check with RO about the actual need for mitigation.
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
thkeldu6
Highly Voted 2 years, 4 months agoSuperMax
Most Recent 8 months, 3 weeks agoStaanlee
10 months, 3 weeks agogroz
1 year, 1 month agoBuzzkill_555
1 year, 2 months agoKoulyo
1 year, 3 months agoBuzzkill_555
1 year, 2 months agoCbtL
1 year, 3 months agohelg420
1 year, 4 months agoJulianleehk
1 year, 5 months ago